$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: I1UUXArMvbTOmNs4+Rkf8brU75CZS3TCqloB+3eAtDY= Subject key identifier: 7E:35:49:4D:E9:3D:D9:E9:DE:C4:79:0C:94:D5:9E:67:3F:EC:A1:AD Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 7F6FD053586D1D8E3FFCEC263C52029A46E60359 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: B2 Signing time: Sun 19 May 2024 13:11:06 +0000 Manifest this update: Sun 19 May 2024 13:06:06 +0000 Manifest next update: Wed 22 May 2024 16:21:06 +0000 Files and hashes: 1: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: rOrvsqapVd8XY6XV3A85SJQQbPjzrR7RezQToePFDJc=) 2: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: KlZJ5jckt5FYQJMvvreG32ZohfgvtBwGxRusjNz2t24=) 3: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: oW/3rE8Cks1XxoiBUrrE9hpJZbI18VXj85etX8aBQRQ=) 4: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: iWAupmsQQLXrigdxxw/IpFgXCPNtccM8s1cNilgGMAM=) 5: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: xO1kZQrZJ2Uzb2KKql3ORvfEQsb7SD07YPbbi4hIjF4=) 6: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: GqpApCZsTZIotGQu+evDyWElqLkFW0uUDaRgMaB4+Yk=) 7: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: bn5KQZGVu6SGhr9eWDVs3TSRZ7/vXp1mh1zB7HdsfHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6f:d0:53:58:6d:1d:8e:3f:fc:ec:26:3c:52:02:9a:46:e6:03:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: May 19 13:06:06 2024 GMT Not After : May 22 16:21:06 2024 GMT Subject: CN=7E35494DE93DD9E9DEC4790C94D59E673FECA1AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:58:49:af:b3:ac:26:ee:5a:de:d8:52:a6: 3d:79:7c:ee:42:35:2b:d1:33:75:6d:00:f5:62:38: a3:ea:ef:3f:6d:16:33:8f:e8:be:04:34:d5:77:43: 37:30:3d:3e:06:fc:5b:c7:fe:4c:89:7c:1b:ac:42: 92:46:91:47:d6:7b:68:4a:e7:36:eb:9d:fe:e5:d8: ca:35:36:e4:b0:fa:e6:b0:37:f3:93:ed:51:83:63: 31:8f:1d:dc:cb:37:0d:1f:35:79:ba:6f:d4:16:6a: 47:62:e4:bc:27:ad:d0:12:ef:70:ac:10:55:b1:96: 6d:28:c5:dd:3a:5c:1d:38:fc:e6:f3:13:6a:15:16: e8:15:cd:11:24:8e:05:a6:9c:9c:35:06:f0:96:41: 21:41:2d:1a:d7:1a:fa:ac:e9:a0:cb:cb:84:2d:e6: 31:24:e9:83:21:9d:e8:ca:40:e2:63:d1:1b:2e:22: cb:3d:d4:33:2d:2f:a9:11:ea:d8:64:11:d1:d5:43: f5:c7:38:e0:22:2f:e5:9a:14:ce:66:c0:ac:14:ae: 62:6f:fc:57:ba:b2:0b:ee:97:64:c8:44:e8:2f:c2: 56:96:08:b0:de:40:1f:d7:4b:73:ca:08:f7:25:a0: 21:41:49:1f:17:e0:a1:1e:ab:3a:b6:ed:63:86:1b: fc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:35:49:4D:E9:3D:D9:E9:DE:C4:79:0C:94:D5:9E:67:3F:EC:A1:AD X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f2:02:cb:b1:19:74:39:e7:51:2d:f5:0e:38:f6:aa:1d:4f: d0:12:cc:58:07:2e:8d:ca:ec:a1:2b:f8:d0:63:8e:ab:df:aa: 62:44:72:2f:e3:c9:e8:d0:80:87:fe:e8:f8:b7:e7:bb:27:88: 7d:7a:cf:81:d8:48:d5:4b:cd:4e:df:b1:94:37:36:c7:ab:dc: d4:aa:95:48:f1:fb:68:3b:97:a8:f2:5b:36:39:bf:1f:98:49: 33:54:83:45:9c:b0:4d:1b:02:b3:a9:40:46:25:52:27:12:0a: f3:7e:9a:91:87:c3:96:cc:a0:3a:ab:10:8a:d6:50:71:1c:11: 3c:52:7d:61:0d:bb:db:1b:45:a7:0f:cc:15:8e:68:e7:39:36: d2:b3:74:80:31:89:5c:37:5b:9c:36:2b:0f:96:bc:de:ef:66: 94:45:2e:6e:78:d1:76:ba:4c:56:20:78:23:2b:3a:87:57:80: 98:ab:26:7c:aa:2f:e2:22:2c:cb:6b:3e:07:3c:45:06:41:a0: 99:c9:21:12:c5:35:3d:d2:e0:4a:ea:ab:90:ad:b2:13:22:3a: d3:cd:7d:d9:7a:bc:c4:fb:32:3b:90:38:2d:7f:9c:40:08:8c: 6b:ba:a6:06:30:12:b1:06:f4:f9:83:32:23:ce:66:a5:89:9f: 09:dd:3c:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2/QU1htHY4//OwmPFICmkbmA1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNDA1MTkxMzA2MDZaFw0yNDA1MjIxNjIxMDZaMDMxMTAvBgNV BAMTKDdFMzU0OTRERTkzREQ5RTlERUM0NzkwQzk0RDU5RTY3M0ZFQ0ExQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxMlhJr7OsJu5a3thSpj15fO5C NSvRM3VtAPViOKPq7z9tFjOP6L4ENNV3QzcwPT4G/FvH/kyJfBusQpJGkUfWe2hK 5zbrnf7l2Mo1NuSw+uawN/OT7VGDYzGPHdzLNw0fNXm6b9QWakdi5LwnrdAS73Cs EFWxlm0oxd06XB04/ObzE2oVFugVzREkjgWmnJw1BvCWQSFBLRrXGvqs6aDLy4Qt 5jEk6YMhnejKQOJj0RsuIss91DMtL6kR6thkEdHVQ/XHOOAiL+WaFM5mwKwUrmJv /Fe6sgvul2TIROgvwlaWCLDeQB/XS3PKCPcloCFBSR8X4KEeqzq27WOGG/w5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfjVJTek92enexHkMlNWeZz/soa0wHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnyAsuxGXQ551Et9Q449qodT9ASzFgHLo3K 7KEr+NBjjqvfqmJEci/jyejQgIf+6Pi357sniH16z4HYSNVLzU7fsZQ3Nser3NSq lUjx+2g7l6jyWzY5vx+YSTNUg0WcsE0bArOpQEYlUicSCvN+mpGHw5bMoDqrEIrW UHEcETxSfWENu9sbRacPzBWOaOc5NtKzdIAxiVw3W5w2Kw+WvN7vZpRFLm540Xa6 TFYgeCMrOodXgJirJnyqL+IiLMtrPgc8RQZBoJnJIRLFNT3S4Erqq5CtshMiOtPN fdl6vMT7MjuQOC1/nEAIjGu6pgYwErEG9PmDMiPOZqWJnwndPCk= -----END CERTIFICATE-----Generated at Sun May 19 14:37:50 2024 by rpki-client on console-ams.rpki-client.org